Check_MK Werk 2668: jar_signature: Handle case correctly where certificate is already expired